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RELATED APPLICATION DATA 



This invention claims priority from U.S. Provisional Patent Application Serial 
No. 60/398,432, filed July 24, 2002. 
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FIELD OF THE INVENTION 



This invention pertains to codes, and more particularly to codes that can be 
assigned to objects, to enable product tracking and information flow, among other 



uses. 
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BACKGROUND OF THE INVENTION 



Before cash registers, merchants had intimate knowledge about their 
customers. Merchants and customers knew each other. Customers knew what kind of 
products and quantities the merchants offered, the price levels for the products, and 
the level of skill and knowledge of the staff Merchants, on the other hand, knew the 
20 kind of products that customers liked, the quantities in which they would purchase, 
the frequency of purchases, and so on. The merchants could then pass to product 
manufacturers information about the customers, allowing the manufacturers to 
customize, at least in part, their products for distinct customers (or at least, distinct 
localities). 

25 The 20* Century, and the industrial age were in large part responsible for the 

loss of this mutual knowledge. Customers still knew much about the merchants, but 
the merchants knew little about their customers. Today, customers hear about sales 
from advertisements, go to the merchants, and purchase the products. Merchants see 
far too many customers to keep track of them individually. And because the 

30 customers learn about the products outside the store, the merchant does not learn 
about the customer's likes and disHkes. 

In addition, it can be difficult to track a product from its source to its eventual 
use. For example, a buyer might want to be sure that the com he purchases is strictly 
organic com, grown without pesticides. But before the buyer receives the com, it 
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travels from the fields to elevators, then is shipped by rail to the buyer, sometimes 
thousands of miles from the grower. By the time the com is received, the buyer has 
no guarantee that the com he receives is the com he paid for (other than the 
assurances of the grower, the elevator operator, and the shipper). The buyer might 
5 test the com and detect some pesticide residue. But is the residue because the grower 
used pesticides in violation of the contract? Was the buyer's com mixed with another 
grower's com in an elevator by the elevator operator? Or was the buyer's com 
diverted by the freight company, either accidentally or intentionally? (If the freight 
company intentionally delivers the com to someone other than the buyer, the crime is 

10 called "diversion.") Currently, the buyer has no way to figure out what happened. 

Another problem manufacturers face is counterfeiting. "Counterfeiting" is 
where a third party attempts to pass off their products as the genuine manufacturer's 
products. Some products are relatively inexpensive to produce, such as shirts. A 
criminal would have to produce many thousands of shirts to make a profit, because of 

15 their relatively low profit margin. But without any way to determine who is 

producing the shirts, the legitimate manufacturer has no effective way to encourage its 
customers to purchase the genuine article. 

A need remains for a way to label goods that addresses these and other 
problems associated with the prior art. 

20 

SUMMARY OF THE INVENTION 

The invention is a method and apparatus for associating codes with objects. A 
client of the service requests a code for an object. The service generates a code for 
the object. The code is then transmitted to the service client, who can mark the object 
25 with the code. The code and object identifier are associated with each other in a 
registry. Downstream users of the object can then make inquiries of the service to 
learn about the object, and to provide additional information about the object. 

The foregoing and other features, objects, and advantages of the invention will 
become more readily apparent from the following detailed description, which 
30 proceeds with reference to the accompanying drawings. 



Page 2 



MJMDo.No. 4359-2 



BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 shows a computer equipped to generate codes for objects and respond 
to inquiries about codes, according to an embodiment of the invention. 
FIG. 2 shows details of the database of FIG. 1. 

FIG. 3 shows a manufacturer etching codes generated by the computer of FIG. 
1 on objects. 

FIG. 4 shows a customer making an inquiry about a code from the computer 
of FIG. 1. 

FIG. 5 shows another customer making an inquiry about another code from 
the computer of FIG. 1 . 

FIG. 6 shows how the database of FIG. 1 might look in the situation of FIG. 5. 

FIG. 7 shows a form used by a client of the computer of FIG. 1 to generate a 
new code. 

FIG. 8 shows a form used by a customer to inquire from the computer of FIG. 
1 about a code. 

FIG. 9 shows a code generated by the computer of FIG. 1 used in a coupon. 

FIGs. 1 OA- IOC show a flowchart of the procedure used by the computer of 
FIG. 1 to generate a code for an object. 

FIGs. 1 1 A- lie show a flowchart of the procedure used by the computer of 
FIG. 1 to process an inquiry about a code for an object. 

FIG. 12 shows a flowchart of the procedure used by a client of the computer of 
FIG. 1 to request a code for an object. 

FIGs. 13A-13B show a flowchart of the procedure used by a customer to 
inquire from the computer of FIG. 1 about a code for an object. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

FIG. 1 shows a computer equipped to generate codes for objects and respond 
to inquiries about codes, according to an embodiment of the invention. In FIG. 1, 
computer 105 includes conventional components, such as a central processing unit, 
memory, network interface card, etc. But a person skilled in the art will recognize 
that not all conventional components might be needed, or can be provided in different 
ways. For example, the network interface can be built into a motherboard, rather than 
being a stand-alone card. FIG. 1 does not show other elements that, in combination 



Page 3 



MJM Do. No. 4359-2 



with computer 105, make up a computer system, such as a keyboard, mouse, monitor, 
printer, etc., but a person skilled in the art will recognize how such elements can be 
added as needed. For example, in one embodiment, computer 105 includes multiple 
storage devices configured as Redundant Array of Independent Disks (RAID) 
5 devices. In another embodiment, computer 105 includes a Storage Area Network 
(SAN) for storing information. In a third embodiment, computer 105 includes an 
Uninterruptible Power Supply, so that computer 105 can shut down safely in case of a 
power failure. A person skilled in the art will also recognize that not all of these 
elements are needed at any particular time. 

10 To generate codes and respond to inquiries, computer 105 includes several 

components. First is code generator 110. As its name implies, code generator 1 10 is 
responsible for generating codes. Code generator 110 includes random number 
generator 115, which is responsible for generating random numbers. Random 
nimibers are used because any rational scheme to enumerate or label products invites 

15 someone to counterfeit the product using the same labeling scheme. But if the label is 
a purely random code and there is no other information on the object, then 
counterfeiting the product ranges from difficult to impossible depending on the 
client's selected level of record-keeping or the number of items coimterfeited. 

In one embodiment, code generator 110 generates codes in base-35. Using 

20 base-35 allows codes to be written easily using the alphabet (except for the letter "O") 
and the digits 0-9. This enables codes with very large values to be written using 
relatively few characters. For example, the decimal number 
"4,596,374,268,234,817,290,392,719,638,653,834,614,271,341,024" can be 
represented in base-35 as DK3E NYXP SKLW ZJ5S. (The spaces in the base-35 

25 code representation shown are for easily readability, and are not part of the code.) 

But a person skilled in the art will recognize that other bases can be used. In addition, 
codes can use graphical symbols other than the Roman alphabet. For example, the 
Kanji character set, used in Asian countries, includes thousands of characters, and 
offering roughly 10^"* different codes. Even non-alphabetic graphical symbols can be 

30 used, although using known alphabets allows for easy input as a human inquiry, with 
a keyboard, by handwriting, or orally. 

In one embodiment, the generated codes have a nimiber of characters that is a 
perfect square: for example, 16, 25, or 36 characters. Having codes of these lengths 
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allows codes to be printed in square blocks, which makes for ease of use. But a 
person skilled in the art will recognize that the reason for such code lengths is purely 
cosmetic. Codes can be of any length, and can be printed in any configuration 
desired. In addition, codes of different lengths can be generated for different objects, 
5 depending on the desired application. Thus, a code assigned to a t-shirt might have 16 
characters, whereas a code assigned to an individual medication pill might have 36 
characters. 

The codes that are generated are not only random, but also have no meaning in 
and of themselves, both before and after generation. There is no relationship between 

10 the object and the code. Thus, while one particular code might represent ajar of BB's 
Strawberry Jam, the next number might represent a radiator manufactured by 
SmithCorp (an automobile manufacturer). Or there might (and in all probability, 
would) be a very large gap imtil the next used number. And the next jar of strawberry 
jam off the BB's fill line might have a code that is trillions and trillions of codes away 

15 from the previous jar of jam. The only meaning is foimd in the association between 
the code and the object. 

That the codes are randomly generated means tiiat a third party cannot 
determine any useful information about products and production systems. In contrast, 
serial identification methods (e.g., labeling the first jar of strawberry jam SJl, ttie 

20 second jar S J2, and so forth) make it easy for third parties to glean information about 
production: the code is easily cracked. The random nature of the codes encourages a 
level of tmst by companies in the registry. 

The associations between codes and objects are stored in a registry, such as 
database 120. Database 120 can be any variety of database: e.g., relational, object- 

25 oriented, etc. Database 120 can also be distributed: that is, part of a SAN, if desired. 
Redundancy, to protect against the accidental loss of data, can also be implemented. 
For example, database 120 can be copied on a second storage of computer 105, so that 
if one storage device fails, the database is still available on the other storage device. 
Database 120 can perform all typical database operations: adding entries to the 

30 database, removing entries from the database, and searching the database for values. 

In one embodiment, database 120 associates object identifiers, typically short 
descriptions of the objects, such as "t-shirt," "ball bearing," or "BB's Strawberry 
Jam," with the codes. These descriptions are assigned by the manufacturers of the 
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objects. In another embodiment, the stored value associated with the code in database 
120 might be a URL or other identifying Intemet address where the manufacturer 
maintains the data describing the object. Li yet another embodiment, database 120 
also stores additional information about the object. For example, database 120 can 
5 store detailed information about the object, such as where the jar was produced 
(Sheridan, Oregon), how many jars were produced before the jar (66), from which 
farm the berries came (Johnson's farm), and when the berries were picked (June, 
2002). In addition, a database entry can be linked to other database entries, indicating 
that there is some relationship between the linked objects. (A person skilled in the art 

10 will recognize that the term "link" here means only an association or cross-reference 
within the database, and would be interpreted broadly to encompass any way to cross- 
reference entries in database 120.) 

Database 120 can also flag information with different publicity levels. Certain 
information can be made available to anyone, whereas other information should be 

1 5 released only to certain parties. For example, the maintenance records of an aircraft 
are important to the owner of the aircraft (and to the Federal Aviation 
Administration), but might not be important to a random person inquiring about the 
aircraft (imless the person happens to be a passenger on the aircraft). Thus, when the 
aircraft owner or the FAA makes an inquiry about the aircraft, they can see the 

20 maintenance history, but an ordinary person would not see anything more than the 
bare record of the aircraft. 

One fimctionality that is typically not offered by database 120 to general 
inquirers (although manufacturers can use this feature, if offered) is text-based 
searching. That is, an inquirer can search database 120 for a particular code, but not 

25 for a particular text string. This is to prevent counterfeiters from being able to locate 
a code assigned to the objects they want to counterfeit. If a coimterfeiter could search 
for "t-shirts," they could locate a valid code for the t-shirts he wanted to coxmterfeit. 
But if the coimterfeiter has to randomly guess codes, he would run out of patience 
long before he achieves any success. (Realize that the counterfeiter needs to copy a 

30 valid code for the counterfeited product: a missing code, a code that was never issued, 
or a code assigned to an entirely different product would all immediately raise a red 
flag.) 
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The reason the counterfeiter would give up is a consequence of the sparsity of 
codes. Selecting 16-character codes using base-35 arithmetic offers roughly 5x10^^ 
different codes. This means that there are 10^^ codes for each man, woman, and child 
alive today. Going to 36-character codes, the number of possible codes increases to 
5 almost 4x10^^. And with an estimate of 10^^ atoms in the entire universe, going to a 
53'Character code would provide enough codes to identify every atom in the universe. 
With at least 10^^ codes per person available, it is hard to imagine how anything more 
than a tiny fraction of the possible codes will ever be used. Simply guessing about a 
particular made-up number would be unlikely to successfully match anything. 

10 Entering one code every 10 seconds would require many years of entries to match 
anything. And even then, it would only be somethings not necessarily the object the 
inquirer was hoping for. Requiring a separate log-on/log-off session for each inquiry 
inserts an insurmoimtable time barrier to anyone seeking to profit from such (illicit) 
casual inquiry by using massive or automated inquiries to discover valid codes. Any 

15 inquiry needs a scheme in order to succeed and the only workable scheme here is 
possession of genuine codes, which are very hard to guess. 

To receive requests for codes and to respond to them, computer 105 needs to 
be able to communicate. Receiver 125 and transmitter 130 are responsible for 
communication. Receiver 125 receives communications from parties interested in 

20 requesting codes (or parties making inquiries about codes), and transmitter 130 
transmits responses. 

Code comparator 135 is responsible for comparing two codes. Code 
comparator 135 is typically built into the search functionality of database 120. But if 
database 120 lacks a search capability, a search capability can be emulated using code 

25 comparator 135. Code comparator 135 takes two codes, compares them, and 
indicates whether the codes are the same. 

Verifier 140 provides manufacturers with some assurance that computer 105 
can prevent counterfeiters from passing off their products as the manufacturer's. 
Verifier 140 checks, when a request for a new code comes in, whether the requester is 

30 in fact the supposed manufacturer of the product. In one embodiment, verifier 140 
uses the manufacturer name to determine a code in database 120 associated with the 
manufacturer, and uses code comparator 135 to compare that code with a 
manufacturer code received along with the request for a code for the object. If the 
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codes match, then the manufacturer is verified; if the codes do not match, then 
someone may be attempting to coimterfeit an object as being produced by the 
manufacturer. The system can then contact the manufacturer and alert them to the 
potential counterfeiting operation, or can simply deny the code. 
5 Verifier 140 can operate in other ways as well. Instead of searching for the 

manufacturer's name, verifier 140 can search database 120 for the provided 
manufacturer's code, and compare the resulting information about the manufactiu'er 
with information provided in the request. Or, verifier can prompt an operator of 
system 105 to contact the manufacturer for a phone confirmation. A person skilled in 

10 the art will recognize other ways that verifier 140 can operate. 

In one embodiment, the components of computer 1 05 (such as code generator 
110, random number generator 115, code comparator 135, and verifier 140) can be 
implemented as software. In another embodiment, the components of computer 105 
can be implemented in hardware. For example, code comparator 135 can be 

15 implemented as a circuit to compare two given codes. A person skilled in the art will 
recognize how to implement the components of computer 105 as hardware. 

Finally, notice 145 is a standard notice that can be prepared in advance. 
Notice 145 is used to inform an inquirer that the provided code does not exist in 
database 120. As mentioned above and will be discussed below with reference to 

20 FIGs. 4-6, 8, 1 1 A-1 IC, and 13A-13B, parties can make inquiries about codes. If the 
code is not found in database 120, notice 145 can be presented to the inquirer, 
informing him that the code is not recognized. 

In FIG. 1, computer 105 is connected to network 150, Network 150 enables 
computer 105 to provide codes responsive to requests across network 150. Network 

25 150 can be any variety of network desired. For example, network 150 can be a local 
area network (LAN), wide area network (WAN), metropolitan area network (MAN), 
or a wireless network, utilizing any wireless commimications protocol, such as 
Bluetooth or any of the IEEE 802.1 la/b/g standards. (The Bluetooth standard may be 
foimd at "http:##www.bluetooth.com#dev#specifications.asp," and the IEEE 

30 802. 1 1 a/b/g standards may be foxmd online at 

"http:##standards.ieee.org#catalog#olis#lanman.html" (to avoid inadvertent 
hyperlinks, forward slashes ("/") in the preceding uniform resoxurce locator (URL) 
have been replaced with pound signs ("#"))•) Network 150 can also be a global 
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network, such as the Internet, enabling users to request or inquire about codes from 
almost anywhere. Finally, network 150 can also be a telephonic network. That is, to 
reach computer 105, code requesters and inquirers dial a telephone nimiber, and a 
modem connected to computer 105 (installed either intemally or extemally to 
5 computer 105) answers to establish the connection and interact with computer 105 
either digitally or by voice. 

In one embodiment, network 150 is the Internet. Database 120 can be 
accessed using a web browser by providing the appropriate interface. This provides 
essentially worldwide access to the service at any time, 

10 FIG. 2 shows details of the database of FIG. 1. In FIG. 2, database 120 is 

represented as a table, with links from entries to other related entries, but a person 
skilled in the art will recognize that other embodiments of the invention can be used. 

In FIG. 2, entry 205 shows code DK3E NYXP SKLW ZJ5S, which is 
associated with ajar of BB's Strawberry Jam. According to the information included 

15 in entry 205, the jar was packaged in Sheridan, Oregon, was the e?*** jar of strawberry 
jam on the line produced that day, and includes berries picked in Jime 2002 from 
Johnson Farm. 

Entry 205 also includes a link to entry 210. Entry 210 is an inquiry by a 
consumer, asking a question about the tamper resistant packaging. Perhaps the 

20 customer who purchased the jar of jam had a concern about the appearance of the 
tamper resistant packaging, and wanted to ask the manufacturer whether his jar was 
safe to eat. Notice that entry 210 uses the same code, supplemented with "11" to 
identify the first inquiry about the jar. If a second inquiry were made about this jar of 
jam, the second inquiry would have the same code, but with "12" appended to it. 

25 Using the same code for inquiries (with unique supplements) enables searching for an 
object and all inquiries about the object using a single code, although a person skilled 
in the art will recognize that inquiries could be located using the links even if assigned 
distinct codes. 

The flags column is used to flag certain entries. For example, entry 210 is 
30 flagged as a general inquiry, to indicate that is was made by a member of the general 
public. In contrast, inquiry entry 215 is flagged as an update inquiry, indicating that 
the inquiry was made by an authorized updater of the base entry (entry 220). 
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Authorized updaters and general inquiries are discussed more below with reference to 
FIGs. 7 and 8. 

Although entry 205 shows details about the berries used as part of the entry for 
the jar of jam, a person skilled in the art will recognize that information about the 
5 berries can be a separate entry, to which the jar is linked. For example, entry 225 
identifies a particular automobile, manufactured by SmithCorp. This particular 
vehicle happens to include a particular radiator, which has its own code and is shown 
in entry 220. This enables someone making an inquiry about the vehicle to find out 
information about every coded part used in the vehicle. So, if a user makes an inquiry 

10 about code A8SL WMRY GQPX JWPF, they leam not only about the car itself, but 
also about the radiator installed in the car, and even potentially about the repair to the 
radiator (shown in entry 215). Of course, the code for an object like a vehicle that has 
numerous components could be linked to all components, not just one, so that an 
inquiry about the car would find out information about every part in the vehicle. 

15 Entry 220 is shown as a 25-character code, whereas all of the other entries are 

shown as 16-character codes. In one embodiment, as discussed above, codes can be 
of different lengths. Fig. 2 shows that codes of different lengths can be used at the 
same time. In the remainder of this description, all codes presented are 16-character 
codes. But a person skilled in the art will recognize codes of different length can be 

20 used as desired. 

As discussed above with reference to FIG. 1, the code requester can store 
additional information with the object identifier. Entry 205 shows this use for jam. 
Entry 230 shows this feature applied to medicine. Entry 230 identifies an individual 
capsule of acetaminophen. Included with the object identifier is the date upon which 

25 the medicine expires. When an inquiry is made of the capsule of acetaminophen, the 
expiration date can be displayed, and can also be compared with the system date. If 
the system date is past the medicine's expiration date, then the system can display a 
warning to the consumer not to ingest the medication. 

Although FIG. 2 shows the additional information as distinct fi-om the object 

30 identifier, a person skilled in the art will recognize that the two fields can be 
combined. In addition, a person skilled in the art will recognize how entries in 
database 120 can be fiirther subdivided: for example, the additional information can 
be divided between public and private information (that is, information that anyone 
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can view and infoimation that is avmlable to only certain users). Then, based on 
information provided by the user at the time of inquiry (e.g., a login ID and 
password), the amoimt of information presented to the user can be customized. 

hi another embodiment, the additional infomiation is not stored directly in 
5 database 120. Listead, the additional information stores a link (usable, for example, 
with a browser across the Litemet) to a site that stores the infomiation to be presented 
to the inquirer. Using a link allows a single screen of data to be presented to any 
inquirer without repeated entry of the information into database 120. hi another 
embodiment, the additional infomiation can store a link to a file (as opposed to a link 

10 across the Intemet) with the pertinent information. 

Although FIG. 2 shows the entries in database 120 as linked, a person skilled 
in the art will recognize that links can be simulated, if database 120 does not 
implement cross-references. For example, entry 225 can include a list of the codes of 
all parts in the car: this list would include the code in entry 220. (Of coxurse, for an 

15 object like a car or airplane with potentially thousands of components, this list would 
get very long.) Where cross-references are simulated, it is useful to give inquiries 
codes based on the code of the object about which the inquiry was made, to keep the 
list of cross-references as short as possible. A person skilled in the art will recognize 
other ways in which links can be handled. In addition, a person skilled in the art will 

20 recognize that cross-references can be skipped if desired. A manufacturer is not 

required to request codes for each component of an object (although doing so can be 
useful where tracking the history of individual components is important). For 
example, a manufacturer of toasters can choose to request codes for each component 
of the toaster, or just one code for the toaster as a whole. In this example, because 

25 there is little value added to tracking the components of the toaster, the manufacturer 
might choose to only request codes for the toaster itself, and not any of its 
components. 

Another use of the codes not shown in FIG. 2 is to represent abstract concepts. 
Similar to how an aircraft is a collection of parts, codes can themselves be grouped, 
30 and the group assigned a single code. For example, a manufacturer might request a 
code to represent "all jars of jam produced at a particular canning factory on Jime 24, 
2002," "all tape recorders produced by a particular manufacturer returned for repair 
under warranty," or "all socks sold to 14-18 year olds," among others. Requesting 
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codes for such abstract concepts enables analysis that might be of value to some group 
(be it manufacturers, consumers, consumer interest groups, etc.). 

FIG. 3 shows a manufacturer etching codes generated by the computer of 
FIG. 1 on objects. In FIG. 3, computer 105 is connected to network 150, across 
5 which business 305 is operating. Business 305 includes computer 310, which is 
connected to laser 315. Computer 310 requests codes for objects as they roll along 
the production line. As each object passes under laser 315, computer 310 instructs 
laser 315 to inscribe a code received from computer 105, For example, the object 
currently under the laser has been etched with the code 13ER I23F 2J49 08N3, 

10 whereas the immediate predecessor object received the code T92T M90F 0323 

89XM. Laser 315 can be of any laser type suitable to the material to be etched. For 
example, laser 315 can be an Yttrium- Aluminum-Gamet laser if the objects are metal. 

A person skilled in the art will recognize that the codes can be printed using 
techniques other than laser etching. For example, with medication in pill form, the 

15 code can be stamped onto the individual pills. And Inkjet printers can print codes on 
many surfaces. 

The codes can be made as large or as small as desired. For example, a code 
can be printed using fairly large fonts for easy readability, as large as (or even larger 
than) one inch square. Or the codes can be printed small, so that they are not easily 

20 located (if camouflage is desired) or safely tucked away in a convenient spot. 

The codes can be placed anywhere on the object desired. For example, for a 
capsule of medication, the codes can be stamped or printed on the capsule anywhere. 
For machine parts that are subject to high wear (e.g., oil field "downhole" tools, such 
as tubing and connectors), information placed on these tools is quickly wom off the 

25 outside surface by friction, and information placed on inside surfaces is corroded off 
by chemicals being transported by the tubes. The codes can be made to be so small 
that they can be placed in protected areas such as on the flange lips where the 
threaded connections bring the tubes together and connect them to one another. There 
are small grooves there that a code can safely reside on and since a single code can be 

30 repeatedly applied to a single part, at least one of them can be reliably coimted on to 
survive the wear and tear of use. For bullets, the code can be placed on the flat base 
of the bullet, inside the protective casing. The act of firing does not harm the code 
etching and the base of the bullet is the part least deformed by subsequent impact with 
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the target. A crime scene investigator can quickly establish who sold the bullet, and 
often who bought the bullet (in addition to the standard process of determining which 
gun fired the bullet). 

For some objects, it is not practical or viable to place the code directly on the 
5 object. For example, synthetic Insulin is a liquid medication. It is not practical to 
mark the Insulin itself. But the pharmaceutical company can laser etch its glass 
containers with the codes. Or an insert can be placed in the package with the 
container (or glued to the vial), the insert imprinted with the code. A person skilled in 
the art will recognize other ways in which the code can be coupled to the object. 

10 Another situation in which it is inconvenient to place the code on the object 

being marked is for agricultural products, such as com, wheat, rice, etc. The problem 
is not that the codes cannot be placed on the objects: codes can be easily be made 
small enough to be placed on objects smaller than an individual grain of rice. But 
marking each kernel of com is not practical. Instead, occasional kernels of coded 

15 white com or lima beans can be inserted into a shipment of yellow com: for example, 
two or three per cubic meter. (Less visible kernels of rice can be labeled and used in 
the same way if more covert approaches are desired.) These coded, separable grains 
provide the necessary tracking information, without affecting downstream processing 
of the com. As the com moves along a conveyor belt, a large green lima bean will be 

20 easy to spot and retrieve, and the code can then be foxmd and used to verify the source 
of the com. (If it is desired that the markers not be visible to end consvuners, the 
relative size of lima beans as compared with kernels of com would enable easy 
sorting. And if white com were used as a marker for a shipment of yellow com, the 
product would not be compromised by the markers, because of the similarity of the 

25 marker to the product.) 

Sometimes the location for the code is chosen for other reasons. For example, 
an object mig^t be designed to be used only once, after which it should be discarded. 
The code can be placed somewhere on the object so that the code is destroyed when 
the object is used. The fact that the code is no longer present on the object lets others 

30 know that the object has been used. For example, some aircraft bolts, as a class, are 
allowed to be tightened only once. The code for an aircraft bolt can be etched on high 
fiiction area where it is destroyed by the setting of the proper torque levels. This 
might involve etching the code to a relatively shallow depth, as opposed to a deep 
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etching done in a protected area of another object to produce a code that is visible 
after the object has been used. 

FIG. 3 also shows converter 320. Converter 320 converts codes from 
alphanumeric to machine-readable form. This enables laser 3 1 S to etch a code that 
5 can be read by a machine (e.g., a scanner), rather than a code that a user would type or 
read to make an inquiry. An example of a machine-readable code is discussed below 
with reference to FIG. 9. 

FIG. 4 shows a customer making an inquiry about a code from the computer 
of FIG. 1 . In FIG. 4, the object about which the customer is making the inquiry is 

10 capsule 405 of medication, with code 410. The customer enters the code as an inquiry 
to computer 105 using computer 415. Computer 415 can be any variety of device 
capable of interfacing with computer 105. For example, computer 415 can be a 
personal computer (desktop computer, laptop computer, or notebook computer, 
among others), a personal digital assistant (PDA), or other electronic device. 

15 Computer 415 can even be a telephone, and not a computer at all. Using voice 
recognition software, computer 105 can recognize the code as spoken by the 
consumer, and respond with recorded information about the object (or use a voice 
synthesizer to "speak" the information about the object to the customer). 

For example, communication 420 is the customer's inquiry about capsule 405. 

20 Message 425 is the response, informing the user that the capsule contains 
acetaminophen, and the medication expires December 31, 2004. 

FIG. 5 shows another customer making an inquiry about another code from 
the computer of FIG. 1. Similar to FIG. 4, the customer is inquiring about object 505, 
with code 510. In FIG. 5, object 505 is a bushing for airplanes. The customer is 

25 using PDA 515, and operating wirelessly. The customer sends inquiry 520, and 

receives back information 525, indicating that the bushing is currently installed on an 
airplane owned by Nightflier Air Lines. The customer then sends communication 
530. But what is in communication 530? 

What the customer sends in communication 530 depends on the situation. For 

30 example, the customer might be a mechanic for Nightflier Air Lines, performing 
routine maintenance on the airplane. The mechanic has just inspected bushing 505, 
and ready to docxmient his inspection. In this case, the customer sends an update in 
commimication 530, indicating his inspection and whatever notes are appropriate. 
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But what if the customer were buying spare parts for another airplane? Either 
bushing 505 is authentic or it is not. If bushing 505, offered to the customer, is 
authentic, then the bushing on the Nightflier aircraft is suspect. And if bushing 505 is 
coxmterfeit, then someone somewhere handled the authentic bushing, and used the 
5 code on counterfeit bushing 505. (the party that intercepted the legitimate code might 
not be the party that produced the counterfeit bushing, as he might only have 
forwarded the legitimate code to another party.) Either way, customer 505 is instantly 
aware that there is a problem with bushing 505. The customer can then send a 
warning in communication 530 to computer 105, so that Nightflier Air Lines can be 
10 notified about the problem, and to flag bushing 505 as having been counterfeited or 
replaced. 

(Similar to the com shipment described above with reference to FIG. 3, the 
actual source of the problem might not be immediately apparent, but someone who 
worked on the Nightflier aircraft is likely involved, which significantly shortens the 
15 Hst of possible suspects. How the list of suspects can be fiirther narrowed is discussed 
below.) 

FIG. 6 shows how the database of FIG. 1 might look in the situation described 
above in FIG. 5, where a customer is considering buying the bushing. In FIG. 6, 
database 120 shows four entries. Entry 605 is the primary entry for the bushing, 
20 showing that the part was installed on the Nightflier aircraft. Entries 610 and 615 
show various inspections of the bushing, attesting that the bushing was found to be 
fine. Entry 620 is the inquiry by the customer considering buying the bushing. (Note 
that entries 610 and 615 are flagged as update inquiries, whereas entry 620 is flagged 
as a general inquiry.) 

25 FIG. 7 shows a form used by a client of the computer of FIG. 1 to generate a 

new code. In FIG. 7, form 705 has fields for all the options a requester might have in 
requesting a code for an object. General information fields 710 requests the general 
information about the requester: name, address, telephone, etc. Of particular interest 
is code field 715. As mentioned above with reference to FIG. 1, a business can have a 

30 code of its own, even though the business might not be generally considered an 

"object," The business can keep its code confidential, so that only parties authorized 
to request codes on behalf of the business know the code. By providing a code for the 
business, the business helps to verify its authenticity as an object producer. The code 
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provided can be compared against a known code for the business: if they match, then 
the business is probably legitimately requesting a new code. 

Name field 720 is where the requester provides the name of the object. This 
name becomes the object identifier stored in the database, as discussed above with 
5 reference to FIG. 2. 

Additional information fields 725 and 730 are spaces where the requester can 
provide additional information about the object. Field 725 stores public information, 
displayed to anyone inquiring about the code to be assigned to the object; field 730 
stores private information, useful to some parties but not significant to general 
10 inquirers. 

Related code fields 735 provide places where related codes can be listed, so 
that the entry in the database for this object can be linked to related objects. The 
requester can link the object to as many other objects as desired: in FIG. 7 only one 
related object is listed. Related code fields 735 can be entered in any manner desired: 

15 they can be typed (using a keyboard), dictated (to voice recognition software), or 
scanned (fi-om the code on the related objects, if available), among other ways. 

Updater fields 740 provide a way to allow other parties to make updates to the 
entry in the database. More specifically, updaters 740 identifies parties that are 
entitled to do more than make general inquiries about the object. For example, if the 

20 object is a bushing for an airplane, the bushing will need to be inspected, and an 

inspection report made. The inspection report is more than just a general inquiry: it 
adds official information about the bushing into the record. If anyone who happened 
to know or stiraible upon the code for the bushing could update the record for the 
bushing, theoretically a nefarious party could enter a report that the bushing failed an 

25 inspection, thereby groxmding the aircraft. Fixing the record would be time 

consuming and costly, and under adverse circumstances could even drive a company 
out of business. By limiting who can make such updates, mischief can be prevented. 

Limiting who can update an entry is useful for objects that can be critical to a 
business. As mentioned above, a report that a bushing failed an inspection could 

30 ground an aircraft. For a fi-eight company that owns only one large aircraft, being 
groxmded could end the business. But a report of a problem with a t-shirt, even if 
false, is not likely to drive a business to bankruptcy. For "non-mission-critical" 
objects, limiting updates can be skipped. 
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Note that updaters 740 uses codes to identify authorized updaters. These 
codes can identify businesses or groups of individuals that are authorized to make 
updates. But these codes can also identify individuals who are authorized to update 
fields. Just like businesses, individuals can have their own codes. If the individuals 
5 protect their own personal codes, they can be used to identify the individuals as 
needed. 

Notify field 745 allows requesters to specify if they want to be notified about 
any inquiries on the object code. If a manufacturer expects that any inquiry is 
significant, the system can automatically notify the manufacturer about the inquiry. 

10 But if the number of inquiries is expected to be large, or the inquiries are not likely to 
be important, the manufacturer can opt to not be notified about inquiries. 

Not shown in FIG. 7 is an option to notify parties other than the manufacturer. 
For example, if an inquiry comes in about an airplane bushing, although the 
manufacturer of the bushing might be interested, the party most likely affected is the 

15 owner of the aircraft. Such an option can be added, by having someone authorized to 
update the record for the object change the party to which the object is registered. At 
that point, the company that receives the registration is treated as the manufacturer. 
But in another embodiment, notices are sent not only to the party that registered the 
object, but also to all other parties that have registered objects linked to the object 

20 about which the inquiry was made. And in yet another embodiment, the two 
altematives are combined. For example, one company might manufacture the 
bushing, a second might assemble the aircraft, and a third might own the aircraft. 

Form field 750 is a place where the manufacturer can specify a form to be 
used when an inquiry is made about the object. A person skilled in the art will 

25 recognize that different forms can be used with different objects. For example, the 
form used when inquiring about an aircraft bushing very likely will ask different 
questions than the form used by a t-shirt manufacturer responding to a customer 
inquiry. In one embodiment, the form linked via form field 750 can be stored 
remotely fi-om computer 105. In that case, the computer storing the form provides 

30 information firom the completed form to the database to complete the inquiry entry. 
In another embodiment, the form is stored on computer 105, so that information 
entered into the form can be directly placed in the inquiry entry. In that case, the 
computer 105 forwards the information to the manufacturer. 



Page 17 



MJM Do. No. 4359-2 



Finally, expiration field 755 provides a way for manufacturers to expire the 
code after a certain number of inquiries. As discussed above with reference to FIG. 3, 
codes can be placed on the object in such a manner as to '"erase" the code as the object 
is used. Expiration field 755 provides a way to expire codes through inquiries. This 
5 can be useful where the code is not likely to be destroyed when the object is used. 
For example, a coupon can printed with a code. When the customer takes the coupon 
to the store, the retailer's inquiry about the code expires the coupon. This prevents 
retailers from keeping a single coupon at the register and using the coupon repeatedly 
as customers approach. Each customer, to receive the discount of the coupon, would 

10 need a different coupon with a unique code. This allows manufacturers to select 
highly specific individuals for coupon distribution. 

Although not shown in FIG. 7, a person skilled in the art will recognize that 
other events can be used to trigger the expiration of the code. For example, the code 
can be set to expire at a particular day and time. Or the code can be set to expire after 

15 a signal fi'om the manufacturer. In addition, combinations of these events can be used 
to trigger the expiration of the code. For example, coupons typically have a limited 
"shelf life," whether or not they are used. 

Public information check boxes 760 provide a way for the requester to indicate 
what information should be made available to public inquiries. As can be seen in 

20 FIG. 7, this requester has indicated that all general information fields 710 should be 
public, except for the manufacturer's code, and that name field 720 should be public. 
This means that, if anyone inquires about the code to be associated with this object, he 
will be told the company name, address, contact person, telephone, and e-mail 
address, and the name of the object, along with all information in public additional 

25 information field 725 (which, by definition, is public). Only inquiries fi*om 

authorized persons can find out the manufacturer's code (code field 715), the private 
additional information (private additional information field 730), related objects 
(related code fields 735), authorized updaters (updater fields 740), and expiration 
conditions (expiration field 755). 

30 Once the requester has completed form 705, they press the submit button. 

This submits the form to the database. Assuming everything is correct (e.g., the 
manufacturer is verified), then computer 105 retums a code to the requester, which 
can then be placed on the object. 
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As discussed above with reference to FIG. 3, code requests can be computer- 
generated. Although a program could be designed to manually complete form 705, it 
is simpler for the manufacturer to have a computer automatically generate the 
messages sent to computer 105, with all the fields stored properly. This speeds up the 
5 process considerably, and limits the possibility of human error in requesting codes. 

In another embodiment, rather than having the manufacturer request codes for 
individual objects, the manufacturer can request a **block" (that is, a set of some 
predetermined size) of codes. The manufacturer can then assign these codes 
individually to objects, and later update the database of the service to reflect which 
10 code identifies which object. In yet another embodiment, the manufacturer can 

provide the identifiers for the objects in making the request for the block of codes, and 
can then place the codes on the objects as they are associated in the database of the 
service. 

In yet another embodiment, the manufacturer can request a block of codes 
15 with some conditions. For example, a company might use an existing internal 

numbering convention for its products. Rather than simply abandoning its existing 
system, the company might request that all codes in the block have a imique prefix of, 
say, ten characters. These 10 characters can then be used to intemally identify the 
products, with the complete code being used within the service. The service can then 
20 randomly generate enough codes to fill the block, filtering out codes that repeat an 
earlier prefix. Notice that the codes are still entirely random, although drawn fi-om a 
slightly smaller set. 

FIG. 8 shows a form used by a customer to inquire fi-om the computer of FIG. 
1 about a code. In FIG. 8, only the top-most section of form 805 is presented to the 

25 inquirer, prompting him for the code. Once the user enters the code in code field 810 
and presses the submit button, the middle section of form 805 is presented. This 
section presents the inquirer with the public information about the object (and the 
private information as well, if the inquirer is authorized to view the private 
information). For example, the code entered in code field 810 is shown as being a t- 

30 shirt manufactured by XYZ Corporation, was manufactured in China fi-om 100% 
cotton on April 3, 2002, and provides cleaning information. 

Update field 815 provides the inquirer with the opportunity to submit a 
question to the manufacturer. Although members of the general public cannot 
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officially update the record of an object, they can add their thoughts, ideas, questions, 
and so on. Authorized updaters can use update field 815 to add official entries to the 
record of the object. Whether or not an inquirer is authorized determines how the 
inquiry is flagged in the database. 
5 Because the manufacturer of the t-shirt whose information is shown in FIG. 8 

added a form for customers, offer 820 is presented to the inquirer. (As part of adding 
the form, the manufacturer can make the offer of the coupon shown, or any other offer 
desired.) If the inquirer opts to complete the form, then the bottom-most portion of 
form 805 is shown. The form asks the inquirer for information about where the t-shirt 

10 was purchased (fields 825), whether the inquirer had shopped there before (field 830), 
how much the inquirer spent on the shirt (field 835), and some personal information 
(fields 840). The personal information is then used to send the inquirer the promised 
coupon (see FIG. 9). 

The reasons why manufacturers might prepare forms like the bottom portion 

15 of form 805 are endless. Typical examples of reasons to prepare the bottom portion 
of form 805 include customer demographic information and customer preferences. 
But there are other reasons as well. For example, the manufacturer can use the 
information received to stop counterfeiting or diversion of goods. 

Consider a t-shirt manufacturer that places a code on each t-shirt 

20 manufactured. Along the way, a coxmterfeiter obtains one t-shirt and copies it, right 
down to the code. (If the t-shirt were lacking a code, the customer would be instantly 
aware that the t-shirt is counterfeit.) The counterfeiter then sells batches of the 
counterfeit t-shirts to venders. A customer buys one of the counterfeit shirts, and 
registers his purchase by making an inquiry of the code on the shirt. The 

25 manufacturer knows where the original shirt was supposed to go (for example. New 
York, NY), but the inquirer indicates that the shirt was purchased somewhere else 
(e.g., Los Angeles, CA). Since the code is authentic, the manufacturer knows that 
someone in the distribution chain for the authentic shirt is involved in the 
coxmterfeiting operation. By tracing the supply chain backwards fi-om the customer, 

30 the manufacturer can eventually identify the party working with the counterfeiters. 
It is true that typically only a small percentage of customers will make 
inquiries based on the code on their shirts, and that one inquiry might not be enough 
to identify the party working with the counterfeiters. In fact, a single inquiry might 
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not be enough to alert the manufacturer to the fact that a counterfeiter exists. But if a 
few inquiries arrive from different locations about the same code, this is strong 
evidence that someone has copied the code onto other goods, suggesting that the t- 
shirt has been counterfeited. And if even 10,000 counterfeit shirts were produced (a 
5 relatively small profit margin for the counterfeiter, bearing in mind the low profit 
margin of t-shirts in general), five inquiries is 0.05% of the counterfeit supply. 
Inquiries about a even a small percentage of the counterfeit t-shirts can spoil the game 
by marking audit trails. 

To identify the counterfeiters, the manufacturer looks for common elements in 

10 the distribution chains of the counterfeited goods. Logistics system diagrams are 

frequently described as "trees" because their pattern of flow looks like a tree with the 
customers at the leaves and the shippers traveling down along the branches combining 
their loads at the places where the branches split apart. If two logistics trees for 
shipment are found to be contaminated, the junctures the two have in common when 

15 juxtaposed will identify the contamination site(s). 

FIG. 9 shows a code generated by the computer of FIG. 1 used in a coupon. 
FIG. 9 shows e-mail 905 generated in response to the inquirer completing the form 
shown in FIG. 8. Note that e-mail 905 includes machine-readable code 910, along 
with corresponding alphanumeric code 915. The inquirer can then take a printout of 

20 e-mail 905 to a retailer the next time he purchases an XYZ Corporation t-shirt, and 
receive the $5,00 discount. The retailer simply scans in machine-readable code 910 
(or types or otherwise enters alphanumeric code 915), and XYZ Corporation transfers 
$5.00 to the retailer's account. 

At this point, some uses of the codes have been explained. A person skilled in 

25 the art will recognize other possible uses. For example: 

Identifying a unique object in combination with other technology. For 
example. Radio Frequency IDentification (RFID) tags are under consideration as a 
way to allow customers to make purchases more quickly. After receiving a signal 
from a short-range transmitter, the RFID tag responds with information about the 

30 object. RFID is essentially a new version of the now-ubiquitous Universal Product 
Code (UPC) barcode, which stores use to quickly determine the price for products. 
Just as the same UPC is used for each copy of an object, the same RFID is used on all 
copies of an object, which means that RFIDs do not uniquely identify objects. But the 
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RFID tag could transmit a code instead of the electronic equivalent of the UPC 
barcode, which could then be used with the service to uniquely identify an object. 
The code could also relay information such as the object's price, enabling quick sale 
of the object using RFID technology. 
5 Another example use of codes could be to identify an object's location. For 

example, an object can use the Global Positioning System (GPS) to locate itself. If 
the object is not where it ought to be, it can send a message (e.g., wirelessly), 
identifying itself with its code and its current location. This can be used, for example, 
in laptop computers. If a user accidentally leaves his laptop computer in the trunk of 

10 an automobile, the laptop can determine its location. If the laptop is not in a normal 
location, after a while the laptop computer can send an e-mail to the owner, 
identifying itself and its location. This would help the owner retrieve the laptop. 

Dealing with theft, diversion, and counterfeiting. A manufacturer can use the 
codes to identify where a code was originally sent (which manufacturing unit), which 

15 shift used that code, where the product was sent for distribution, and so on. Being 
able to follow delivery paths backwards from the customer's end makes any point of 
departure easy to spot and investigate. 

A code allows anyone to quickly ascertain whether an object (part) is 
authentic. (The absence of a code is a sure warning.) If the "seller" tells a potential 

20 buyer that the object they are considering is "certified" and "new," the buyer can 

quickly use the service from any convenient access point on the planet to identify the 
object. If the authenticity of the object is brought into question (the record indicates 
that the object is physically elsewhere at the time), the buyer can avoid the 
transaction, and the seller becomes suspect. In fact, the "authentic" object (the object 

25 actually located by the service) also becomes suspect, and its path to placement can be 
examined for cormnon junctures with the paths of other previously revealed suspect 
parts to reveal the counterfeiter. 

Customers can be encouraged to register or check their codes by being offered 
incentives for locating a counterfeit code. For example, if a customer is the first 

30 person to inquire about a code that tums out to be counterfeit, the customer can 
receive some benefit from the manufacturer. This helps involves customers in 
policing coxmterfeit goods. For example, if a customer makes an inquiry about an 
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invalid code for a counterfeit t-shirt, the t-shirt producer might reward the customer 
with a coupon for a discount on their next purchase. 

As discussed above with reference to FIG. 3, shipments of agricultural 
products can be tracked using coded lima beans (or other agricultural products that 
5 can easily be located and removed from the shipment). If a lima bean coded for a 
shipment of com from a particular farm is found in a given shipment of com, it 
supports the assertion that the com, in fact, comes from that farm. If someone were to 
add grain, illicitly, over three or four shipments the particular point of contamination 
can be identified as the point that those shipments had in common. So if an elevator 

10 operator in Des Moines, lA is adding other com to the coded lot, he will be isolated 
by his being the only component a particular contaminated shipment has in common 
with other contaminated shipments. 

Protecting the identity of the source of the object. Traditionally, objects are 
marked with ample information identifying who manufactured the object, when the 

15 object was manufactured, lot information, and so on. This information acts a form of 
publicity about the manufacturer of the object. But there are circumstances when a 
manufacturer would prefer to hide its involvement with the object. For example, 
some parts of the world view America and American products with attitudes ranging 
from disdain to complete hatred. Advertising that an American company 

20 manufactured the object could lead to ridicule or to trouble for local distributors of 
American products. By having products labeled only with codes (rather than the 
traditional name and address of the manufacturer), the manufacturer's identity is 
effectively hidden. 

Another reason that a company might want to hide its manufacturing of an 
25 object is to prevent threats against the company. For example, not too long ago news 
agencies around the world broadcast a video tape of Osama bin Laden. The middle 
thirty minutes were from a handheld video camera touring a helicopter crash site. 
During the tour, five different manufacturers of the aircraft's parts were identified as 
to their name and location, i.e., exact addresses. This identification could easily have 
30 been used by perpetrators bent on mischief Someone interested in trying to hurt 
American military organizations might have used this information to attack these 
military suppliers, dismpting parts supply and potentially weakening American 
military might. But if the aircraft parts had been marked only with codes. 
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troublemakers would not know the address or name of the company that 
manufactured the parts, and would not be able to cause problems. 

Controlling the flow of information to a party known to be interested in 
mischief. Consider the situation where an object is known to be in the hands of a 
5 party interested in mischief (e.g., a counterfeiter). Inquiries related to the code on that 
object probably come from the mischief-maker. The inquiries can be backtracked to 
determine the location of the mischief-maker, and he can be fed misinformation to 
intentionally lead him astray. This approach could have been used, for example, in 
the earlier-described Bin Laden tape, if someone had made an inquiry about the code 

10 for a part known to have crashed in enemy territory. 

Providing a model for official record keeping. As discussed above with 
reference to FIGs. 2 and 5-6, the codes can be used to create an official record with 
respect to an object. For example, as aircraft parts are maintained, the maintenance 
records can be stored as inquiries to the service about the object. If an accident 

15 should happen and a flight-critical part is discovered without a code, the party that 
recorded the last inspection of the part is a likely suspect for causing the accident. 
Identifying the correct culprit can place the liability for the accident on the correct 
shoulders: the mechanic, as opposed to the airline or the instance company. 

To fiirther aid in record keeping, it is helpfiil if every party that makes contact 

20 with the object (other than the end user) updates the object record, even if such 
updates are not entered by authorized updaters. For example, when an object is 
placed on a truck for shipment, the trucker can make an entry that the object was 
received. When the object is inspected at a boarder, a customs agent can update the 
object to reflect that the object was inspected at a particular border crossing. (In fact, 

25 customs agents, along with other governmental officials, might be considered 
authorized updaters by default, as long as they are operating within their official 
capacities.) And so on. 

In addition, individuals can use codes themselves; for example, to track 
objects downstream fi'om their location, even if the objects do not have a code, or 

30 even to label personal products, such as home-canned j ars of j am. 

Providing limits to uses of objects that might otherwise be repeated. As 
discussed above with reference to FIG. 9, coupons are often copied or reused. This 
reuse costs the manufacturer money. By causing codes to expire, a limit on the 
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number of uses of the code can be enforced, even if customers attempt to copy the 
codes improperly. 

Ensuring the flow of information from manufacturers to end-users, and 
allowing information to flow from customers back to vendors, distributors, and 
manufacturers. When an object enters the customer's domain, it does not lose its 
connection to the manufacturer's knowledge base. A code maintains a link between 
the object, everything the manufacturer knows about the object, and the interests of 
the customer. This link is potentially perpetual, waiting to be useful to any of the 
parties involved. Code inquiries/customer registration can be encouraged by offering 
customers who register their products some benefit. For example, customers who 
register themselves to the code associated with their newly acquired object can be 
entered into a drawing for a coupon from their local retailer. 

Often, there are more than two parties involved. There are also insurance 
companies, PR agencies, shipping companies, and suppliers, each of whom may want 
to collect just the tiniest bit of customer information to make themselves better 
companies. Li past times this would be far too expensive a proposal, but now that the 
customers themselves can be self-organizing around a coherently indexed interchange 
(the codes of an embodiment of the invention), collecting information is nearly 
friction-free. Information is easy to acquire at any time, and in fact in near real time. 

As discussed above, manufacturers have different incentives to use the codes. 
Some manufacturers want customer intimacy, others want quality control. The codes 
can also be used for inventory management. In all cases, the codes provide the same 
identity service: the same paradigm of trusted, neutral high quality coherency. 
Manufacturers can provide their associates, customers, or the general public with 
verbose and specific product information, such as safety alerts, merchant locations, 
expiration notices, Internet links, product service policies, customer registration 
portals or current ownership. Customers have an incentive to use the codes to receive 
the rewards offered by the manufacturers, and to receive timely and complete 
information about the objects from the manufacturers. 

As discussed above with reference to FIG. 3, the codes can be placed on or 
with the objects. Rather than providing any additional information with the objects 
themselves, the customer can be directed to use the code to find out information about 
the object. For example, rather than placing inserts with small print into a package 
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with medication, the customer can be instructed not to use the medicine until he has 
entered the code (or one code, for example if individual pills are marked) of the 
medication into the service. No other information is provided, not even the name of 
the pharmaceutical company or the name of the medicine. (By not disclosing even 
5 the type of medication, thieves would have to waste time determining exactly what 
medicine they have stolen. The medicine might then be held beyond its shelf life, 
making the theft a worthless endeavor.) When the customer enters the code into the 
service, the customer can receive all the necessary information: for example, the name 
of the pharmaceutical company, the proper dosage and duration of use, and the 

10 expiration date of the medication, all on a proper label printed at their home, 

FIGs. 1 OA- IOC show a flowchart of the procedure used by the computer of 
FIG. 1 to generate a code for an object, hi FIG. lOA, at step 1003, the service 
receives a request for a code for an object. At step 1006, the service receives 
information about the object being identified. At step 1009, the service receives an 

15 identifier of the manufactiwer of the object. As shown by dashed arrows 1012 and 
1015, steps 1006 and 1009 are optional, and can be omitted independently. 

After steps 1003-1009 are performed, the service can verify the manufacturer. 
This can be done in different ways. For example, at step 1018, the service can request 
that the manufacturer verify the request, perhaps by having an operator of the service 

20 speak with a representative of the manufacturer over the telephone, perhaps using 
another means of communication (such as e-mail). Alternatively, at step 1021, the 
manufacturer can provide a manufacturer code (known only to the manufacturer), 
which the service can use to verify the manufacturer's authority at step 1024. Step 
1018, and altematively steps 1021-1024, can be skipped, as shown by dashed arrow 

25 1027 (which also skips step 1030 on FIG. lOB). 

At step 1030 (FIG. lOB), the service checks whether the request was verified. 
If the request was not verified, then at step 1033 the service sends a message to the 
manufacturer about the verification problem. Otherwise, at step 1036 the service 
generates a code using the random number generator. 

30 At step 1039, the service checks whether the randomly generated code has 

already been used (an unlikely prospect, given the sparsity of codes, but still a 
possibility). If the code was a duplicate, then control retums to step 1036 to generate 
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a new code. Otherwise, at step 1042 the object identifier is added to the database, and 
at step 1045 the generated code is associated with the object. 

At step 1048 (FIG. IOC), the service checks whether a manufacturer identifier 
was received (at step 1009). If a manufacturer identifier was received, then at step 
5 1051 the manufacturer identifier is associated with the object identifier. As shown by 
dashed arrow 1054, steps 1048-1051 can be skipped. 

At step 1057, the service checks whether information about the object was 
received (at step 1006). If information about the object was received, then at step 
1060 the information is associated with the object identifier. As shown by dashed 
10 arrow 1063, steps 1057-1060 can be skipped. 

Finally, at step 1066, the service sends the generated code back to the 
requester. 

Although FIGs. 1 OA- IOC show one possible ordering of steps, a person skilled 
in the art will recognize that the steps can be ordered in different ways. The invention 
15 is intended to cover all possible variations of FIGs. 1 OA- IOC (along with all possible 
variations of FIGs. 1 1A-13B, discussed below). 

FIGs. 1 1 A-1 IC show a flowchart of the procedure used by the computer of 
FIG. 1 to process an inquiry about a code for an object. In FIG. 1 1 A, at step 1 103, the 
service receives an inquiry about a code. At step 1 106, the service searches the 
20 database for the code. At step 1 109, the service checks whether the code was found in 
the database. If not, then at step 1112 the service notifies the inquirer that the code 
was not valid. 

If the code was found in the database, then at step 1115 (FIG. 1 IB) the service 
accesses the object identifier associated with the code in the database. At step 1118, 

25 the service accesses public or private information associated with the object identifier. 
As discussed above with reference to FIGs. 7-8, all inquirers can access the public 
information about the object, but only authorized inquirers can access the private 
information. At step 1 121, the information and the object identifier are retumed to the 
inquirer. At step 1 124, the service adds the inquiry to the database (using the code for 

30 the object tagged with an inqxiiry number). At step 1 127, the service associates the 
inquiry with the object identifier in the database. 

At step 1 130, the service receives update information firom the inquirer. As 
discussed above with reference to FIG. 8, this can be update information firom an 
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authorized updater or general information/query from a member of the general public. 
At step 1 133, this update information is added to the inquiry in the database. At step 
1 136, the update information is forwarded to the manufacturer of the object. As 
shown by dashed arrows 1 139 and 1 142, steps 1 130-1 136, or just step 1 136, can be 
5 skipped. 

At step 1 145 (FIG. 1 IC), the service checks whether there is information to 
ask of the inquirer (for example, a form the manufacturer would like the customer to 
complete). If there is information to ask of the inquirer, then at step 1 148 the 
information is requested of the inquirer. At step 1151, the requested information is 
10 received from the inquirer, and at step 1 154 the requested information is added to the 
inquiry in the database. Finally, at step 1 157, the requested information is forwarded 
to the manufacturer of the object. As shown by dashed arrow 1 160, step 1 157 can be 
skipped. 

FIG- 12 shows a flowchart of the procedure used by a client of the computer of 
15 FIG. 1 to request a code for an object. At step 1205, the manufacturer identifies an 
object. At step 1210, the manufacturer requests a code for the object from the service. 
At step 1215, the manufacturer provides information about the object (such as the 
manufacturer's identity or other information). As shown by dashed arrow 1220, step 
1215 can be skipped. At step 1225, the manufacturer identifies codes of other objects 
20 that are associated with the object in question. As shown by dashed arrow 1230, step 
1225 can be skipped. At step 1235, the manufacturer provides a link to additional 
information about the object (such a form or information about the object stored 
outside the service). As shown by dashed arrow 1240, step 1235 can be skipped. 
At step 1245, the manufacturer receives the code from the service. At step 
25 1250, the manufacturer converts the code from alphanumeric to machine-readable. 

As shown by dashed arrow 1255, step 1250 can be skipped. Finally, at step 1260, the 
manufacturer places the code on the object or on some separate material included with 
the object. 

FIGs. 13A-13B show a flowchart of the procedure used by a customer to 
30 inquire from the computer of FIG. 1 about a code for an object. In FIG. 13 A, at step 
1305, the inquirer determines a code for the object, either from the object itself or 
from material included with the object. At step 1310, the inquirer provides the code 
to the service. At step 1315, the service determines whether the code is valid. If not. 



Page 28 



MJM Do. No. 4359-2 



then at step 1320 the inquirer receives a notice that the code is not valid. At step 
1325, the inquirer receives a request for information about the code (such as from 
where the inquirer received the code), and at step 1330, the inquirer provides the 
information to the service. 
5 If the code is vaUd, then at step 1335 (FIG. 13B), the inquirer receives 

information about the object from the service. At step 1340, the inquirer provides 
additional information (such as update information or general comments/queries) to 
the service. As shown by dashed arrow 1345, step 1340 can be skipped. 

At step 1350, the inquirer receives a request for information from the service. 

10 At step 1355, the inquirer prepares a response to the request for information, and at 
step 1360 the inquirer provides the response to the service. As shown by dashed 
arrow 1365, steps 1350-1360 can be skipped. 

A person skilled in the art will recognize that an embodiment of the invention 
described above can be implemented using a computer. In that case, the method is 

1 5 embodied as instmctions that make up a program. The program may be stored on 

computer-readable media, such as floppy disks, optical discs (such as compact discs), 
or fixed disks (such as hard drives), and can be resident in memory, such as random 
access memory (RAM), read-only memory (ROM), firmware, or flash RAM memory. 
The program as software can then be executed on a computer to implement the 

20 method. The program, or portions of its execution, can be distributed over multiple 
computers in a network. 

Having illustrated and described the principles of the invention in a preferred 
embodiment thereof, it should be readily apparent to those skilled in the art that the 
invention can be modified in arrangement and detail without departing from such 

25 principles. All modifications coming within the spirit and scope of the accompanying 
claims are claimed. 
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